If your DNS provider does not support DKIM you will not be able to move to full DMARC reject without the risk of valid emails failing. The recommended action here is to move your domain to a DNS provider that supports DKIM to maximise the chance of your emails being delivered in case SPF fails.
To learn more about why both SPF and DKIM should be used click on the button below.